Authentication Bypass in Solace Extra Plugin for WordPress
CVE-2026-16965
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 9 August 2026
Badges
What is CVE-2026-16965?
The Solace Extra plugin for WordPress, prior to version 1.6.1, has a notable design flaw where it lacks proper capability and nonce checks for specific AJAX operations. This vulnerability allows any authenticated user, including subscribers, to make unauthorized modifications to post meta data on any post within the site. Additionally, through Cross-Site Request Forgery (CSRF), this vulnerability can be exploited by logged-in users, enabling them to deactivate the active templates of the site, thus posing significant risks to site security and functionality.
Affected Version(s)
Solace Extra 0 < 1.6.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.